Job Description
The Incident Commander (IC) is responsible for the management, supervision, and coordination of cyber security incidents as part of a 24x7, 365 Security Operations environment, including nights, weekends, and holiday coverage through an on-call rotation or designated duty schedule. Serving as the critical bridge between executive leadership and technical response teams, the IC provides authoritative command and control during incidents, ensures rapid and informed decision-making, and drives continuous improvement of the City's cyber incident response capabilities. As an experienced leader with deep technical fluency, the IC maintains and evolves incident response playbooks aligned with industry standards (e.g., NIST SP 800-61, NIST CSF) conducts cyber tabletop exercises, acts as a primary liaison for third-party and cross-agency incidents and communicates clearly and confidently with Agency leadership and City Hall stakeholders. The IC identifies operational gaps and maturity improvements to ensure the Security Operations Center (SOC) is staffed and led 24x7 with the authority to take immediate, decisive action upon notification of a cyber security incident.
Responsibilities include, but are not limited to, the following:
-Lead significant, high-impact, or high-visibility cyber security incidents, including validation, prioritization, escalation, and coordination of response activities across multiple City agencies in a 24x7 operational tempo, including nights and weekends as required;
-Serve in an on-call Incident Commander capacity, providing off-hours leadership, decision-making, and executive communication during active incidents;
-Exercise rapid, independent decision-making in high-stress, fluid environments, including incidents affecting critical infrastructure, life-safety systems, and essential City services;
-Provide strategic guidance on, and tracking of, tools, visibility, staffing, and capability gaps impacting the Citys overall cyber security posture and response readiness;
-Act as the primary liaison between the SOC and impacted agency business, technical, legal, and executive teams throughout the incident lifecycle;
-Coordinate and direct efforts among SOC analysts, incident responders, threat intelligence, forensics, legal, communications, and external partners using clearly defined command-and-control structures;
-Deliver timely, accurate, and actionable briefings to executive leadership, Agency heads, and other stakeholders during and following incidents;
-Lead and oversee After-Action Reports (AARs) and lessons-learned activities, translating findings into concrete improvements to people, process, and technology;
-Test, maintain, and continuously improve incident response plans, playbooks, and escalation procedures to address emerging threats and evolving attack techniques;
-Build and maintain strong working relationships across City technology, security, legal, privacy, communications, and operational teams;
-Participate in and lead special initiatives, exercises, and strategic projects related to cyber resilience, operational readiness, and incident response maturity.
-Handle special projects and initiatives as assigned.
HOURS/SHIFT
Day - Due to the necessary management duties of this position in a 24/7 operation, the candidate may be required to be on call and work various shifts such as weekends and/or nights/evenings.
WORK LOCATION
Brooklyn, NY
TO APPLY
* Special Note: Taking and passing civil service exams are necessary to maintain employment with the City of New York. Please check the Department of Citywide Administrative Services (DCAS) website: (Open Competitive Exams for Anyone - Department of Citywide Administrative Services) for important exam filing information. Please ensure that you are either a permanent employee in the civil service title listed on this posting, or, that you file for the examination when there is an open filing period. For more information regarding the civil service process, please visit the DCAS website at: How You Can Apply for a Civil Service Exam - Department of Citywide Administrative Services
* Interested applicants with other civil service titles who meet the preferred requirements should also submit a resume for consideration
Please go to www.cityjobs.nyc.gov and search for Job ID #791541
SUBMISSION OF A RESUME IS NOT A GUARANTEE THAT YOU WILL RECEIVE AN INTERVIEW
APPOINTMENTS ARE SUBJECT TO OVERSIGHT APPROVAL
This position is open to qualified persons with a disability who are eligible for the 55-a Program.
Please indicate in your cover letter that you would like to be considered for the position under the 55-a program
OTI participates in E-Verify
TELECOMMUNICATION MANAGER - 82984
Qualifications
1. A baccalaureate degree from an accredited college including or supplemented by 24 credits in the field of voice and/or data telecommunications or in a pertinent scientific, technical, electronic or related area, and four years of satisfactory fulltime experience in the performance of analytical, planning, operational, technical, or administrative duties in a voice and/or data telecommunications or closely related electronics planning, management, and/or service organization, one year of which must have been in a highly specialized capacity and 18 months must have been in an executive, managerial, or administrative capacity or in the supervision of staff performing work in the voice and/or data telecommunications field; or
2. An associate degree from an accredited college including or supplemented by 12 credits in the field of voice and/or data telecommunications or in a pertinent, scientific, technical, electronic or related area and five years of experience as described in "1" above; or
3. Education and/or experience equivalent to "1" above. However, all candidates must have at least a four-year high school diploma or its educational equivalent and one year of the specialized experience as described in "1" above and must possess the 18 months of executive, managerial, administrative or supervisory experience as described in "1" above.
Additional Information
